Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa
File:                     3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa (raw, json)
Hash identifier:          ju41spnPdcHn0VAkhkr7SjNUGWOqHvM+2TsOOFmj39s=
Subject key identifier:   9E:8A:C8:39:7C:50:A0:2E:3E:19:E3:AC:13:8F:32:89:47:CE:76:EF
Certificate issuer:       /CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209
Certificate serial:       6EF0A630C3F561770986043DB0821E98E0F61025
Authority key identifier: 80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa
Signing time:             Sun 03 May 2026 02:33:35 +0000
ROA not before:           Sun 03 May 2026 02:28:35 +0000
ROA not after:            Sun 02 May 2027 02:33:35 +0000
asID:                     141607
IP address blocks:        210.79.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl
                          rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f0:a6:30:c3:f5:61:77:09:86:04:3d:b0:82:1e:98:e0:f6:10:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80EE3E77120F65C1886C09F137B30D2CB1DE0209
        Validity
            Not Before: May  3 02:28:35 2026 GMT
            Not After : May  2 02:33:35 2027 GMT
        Subject: CN=9E8AC8397C50A02E3E19E3AC138F328947CE76EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:4d:07:2b:ac:ae:6d:dd:c2:6f:25:8c:a2:
                    1e:1c:0c:4b:d6:c7:20:7c:a3:a5:4a:ba:2a:13:63:
                    70:5e:c2:b5:22:ba:f5:35:ff:b3:76:ec:26:c7:5a:
                    e8:53:c6:9d:77:e3:83:16:4a:a9:ae:30:62:9b:66:
                    13:8b:cc:ef:b5:72:78:0e:eb:a5:ae:f1:93:fa:5a:
                    0b:cd:9c:50:4d:43:7c:db:a2:1f:89:4a:bc:c4:99:
                    c8:13:bd:1a:b2:59:cd:fd:b1:f7:d8:dd:99:47:b2:
                    67:09:3e:52:56:2d:ce:4a:ae:52:19:59:61:20:ab:
                    1d:81:15:51:ec:57:1c:86:89:40:f3:4f:df:25:65:
                    46:ef:a6:5f:43:16:00:08:62:2c:6e:b3:97:a9:fe:
                    c3:1c:63:78:61:fa:f1:da:b6:72:b4:46:24:61:22:
                    02:9d:a7:52:28:88:d9:2a:2f:64:37:fb:01:cf:14:
                    db:53:73:ed:b6:4e:dc:73:d2:d6:ee:a2:79:de:b0:
                    e4:5b:87:da:68:e3:af:bb:31:40:6f:bd:22:21:d1:
                    28:16:e8:e4:b9:59:d0:9a:7e:e8:8f:ac:7b:95:d9:
                    52:a3:c7:13:ae:df:04:e1:ef:3e:9d:98:eb:51:c7:
                    be:92:67:d7:b8:a1:52:a2:bd:bb:70:0d:60:41:e4:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8A:C8:39:7C:50:A0:2E:3E:19:E3:AC:13:8F:32:89:47:CE:76:EF
            X509v3 Authority Key Identifier:
                keyid:80:EE:3E:77:12:0F:65:C1:88:6C:09:F1:37:B3:0D:2C:B1:DE:02:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/80EE3E77120F65C1886C09F137B30D2CB1DE0209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80EE3E77120F65C1886C09F137B30D2CB1DE0209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/3231302e37392e3134332e302f32342d3234203d3e20313431363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:f5:03:c8:f9:00:12:ec:e0:ff:39:dc:75:70:62:a2:da:
         f5:ad:1d:af:e8:95:ee:d9:8d:81:e8:00:be:d7:f2:a0:1f:15:
         c3:23:71:08:2f:b0:a2:b6:d9:1c:2c:36:3c:10:5c:cc:92:40:
         04:67:44:70:93:02:2c:0f:35:c8:76:1e:c2:ba:f5:27:16:1b:
         9f:2b:4e:17:ad:8a:8b:7e:43:6c:ef:37:48:96:9b:95:a2:84:
         38:fb:62:35:70:aa:87:21:4b:d8:c5:f7:f1:c6:5b:3b:b5:a2:
         8f:00:82:80:21:02:5b:2a:9b:ae:49:a6:aa:18:1d:07:ca:4b:
         9f:12:91:d5:03:2a:f5:4f:3a:6d:a1:f0:a9:0b:5a:27:c5:43:
         93:46:eb:73:71:21:d1:b5:4b:ac:e3:77:d8:8d:91:ca:ad:94:
         6e:8d:e6:c5:6a:92:b8:fd:5e:ac:7d:7c:45:f9:15:26:f3:09:
         35:ca:7e:0c:45:7d:c0:78:35:3c:dc:f1:db:c4:a9:e5:14:5f:
         47:d8:ff:d7:e1:94:ba:38:b5:c4:e4:70:59:76:0d:93:4f:59:
         16:f5:16:c1:7a:11:d8:1d:79:ea:d4:42:e1:dd:47:33:43:44:
         f6:da:b9:43:4e:ed:0c:f8:81:7c:e9:6a:9a:ee:4b:21:b8:5b:
         a9:be:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:32:31 2026 by rpki-client